This page explains what data we process, why we process it, and which controls are available to you.
Policy version: 04/04/2026
Scope
Manage.Camp is a multi-tenant B2B SaaS product for campground operations. During the current pre-company phase, the public website, public contact form, and related email communications are operated by the individual data controller identified below. Subscribers remain data controllers for their own guest and business records, while service-side processing for those records is carried out only under subscriber instructions.
Data we process
We process data required to operate Manage.Camp (account data, billing metadata, and security/audit events). Reservation and operational records are processed on behalf of subscribers as part of service delivery.
Legal basis
Processing is based on contract performance, legal obligations, and legitimate interests for security, reliability, and abuse prevention.
Your rights
Depending on applicable law, you can request access, correction, export, restriction, or deletion. Manage.Camp provides GDPR export and erasure tooling for these flows.
Retention
Retention periods are configured per data category. Expired logs and export packages are cleaned through scheduled retention jobs.
Subprocessors and sharing
Data is shared only with subprocessors required to deliver infrastructure and email services. A current subprocessor list is available on request.
Security safeguards
Access controls, 2FA, tenant scoping, signed links, and audit trails are used to protect data confidentiality and integrity.
Data controller
During the current pre-company phase, the data controller for this website and related email communications is Marko Bajlo, operating Manage.Camp during the pre-company phase. For privacy requests or questions about how personal data is processed, contact support@manage.camp.
Data-subject requests and timelines
For access, correction, export, or erasure requests, use the privacy contact email below. We process requests in line with applicable GDPR timelines.
The standard response window for a valid request is up to 30 days, unless the law allows an extension.
Where processing is based on legitimate interests, you also have the right to object to that processing. To exercise that right, contact support@manage.camp.
You also have the right to lodge a complaint with your local supervisory authority. If you are in Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).
Aggregate Page-View Measurement
When you visit a publicly accessible page on Manage.Camp — including marketing pages and published camp pages — we count the visit server-side for internal traffic measurement. This counting is aggregate only: we do not place an analytics cookie, create a client-side identifier, or build a visitor profile. No personal data beyond the standard information contained in the HTTP request (such as the page URL, timestamp, and browser type) is used. The resulting aggregate totals help us understand overall traffic patterns and improve the service. This processing is based on our legitimate interest in understanding how our public pages are used (GDPR Art. 6(1)(f)). You can contact us at any time to exercise your rights regarding this processing.
Public contact form processing
If you contact Manage.Camp through the public contact form, we process the email address and message you provide together with limited technical/security data such as your IP address and anti-spam validation signals. We use this data to respond to enquiries, prevent spam and abuse, and investigate security incidents. This processing is based on our legitimate interest under GDPR Art. 6(1)(f). Public contact submissions are retained for up to 90 days and then deleted through our retention workflow.
Privacy contact
For privacy requests or data-subject questions, contact support@manage.camp.